file[.]exe | Triage™

General

Target
file.exe
Size 264KB
Sample221004-m443zaafd3
SHA256 ef5b55fdd770f3c9cbd4a86cc0afe70e79d4d634bd7c88d6d48e07d5a6742dca
MD5 b2949b2eb9db982c3782953de8a2573f
SHA1 34ff1afa580b8ca0c23d818f62aafe11e9e16fc2
SHA512 368d9851bce5bd3aa35d41a2b64ad84f4ebe8ff7611fe4b09ca61db298ac8a5590dd11c8ca56786088c311ab7c5c83ac4da819b50cf449b50704c88b482e33d2
SSDEEP 6144:9+dLV/BxVCLYAXfIeyJuzbgwu70kmiHwVfU:9a5/BxsLYAXWunnsSiv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 264KB

file.exe

IMPHASH fe8e44e9bcf985b83aaf4b8d099548b9
SHA256 ef5b55fdd770f3c9cbd4a86cc0afe70e79d4d634bd7c88d6d48e07d5a6742dca
MD5 b2949b2eb9db982c3782953de8a2573f
SHA1 34ff1afa580b8ca0c23d818f62aafe11e9e16fc2
SHA512 368d9851bce5bd3aa35d41a2b64ad84f4ebe8ff7611fe4b09ca61db298ac8a5590dd11c8ca56786088c311ab7c5c83ac4da819b50cf449b50704c88b482e33d2
SSDEEP 6144:9+dLV/BxVCLYAXfIeyJuzbgwu70kmiHwVfU:9a5/BxsLYAXWunnsSiv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30909

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointW SetSystemTimeAdjustment FindNextFileW FindResourceExW AddVectoredExceptionHandler BeginUpdateResourceW GetConsoleTitleW TransmitCommChar GetCPInfoExA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExW LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterA GetModuleHandleA GetShortPathNameW GetPrivateProfileStringW PeekConsoleInputA GlobalGetAtomNameA EnumResourceTypesW GetProcAddress SetFileShortNameW SetCalendarInfoW SetComputerNameW GetFileAttributesA GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameA AddAtomW GetProfileIntA SetFileAttributesA AllocConsole SetConsoleCtrlHandler CreateJobObjectA CreateMutexA GetNumaHighestNodeNumber GetBinaryTypeA GetLongPathNameA FindNextFileA ResetEvent GlobalUnfix GetComputerNameA GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetConsoleAliasW LoadLibraryA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetStartupInfoW HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing